A. The current user must own the macro.

B. A pipe may always follow a macro.

C. The macro must be defined in the current app.

D. Only when sharing is set to global for the macro.

A. An argument can be passed through the outer macro.

B. An argument can be passed to the outer macro by nesting parentheses.

C. There is no way to pass an argument to the inner macro.

D. An argument can be passed to the inner macro by nesting parentheses.

A. They can be used with Pivot, the | tstats command, or the | datamodel command.

B. They can still be used in the Pivot tool but only with the accelerate_pivot capability.

C. They can no longer be used in the Pivot tool.

D. They can be used with the |tstats command, but will only return that data which has been accelerated.

A. Field alias names replace the original field name.

B. Field aliases only normalize data across sources and sourcetypes.

C. Field aliases can be used in lookup file definitions.

D. Field alias names are not case sensitive when used as part of a search.

A. Identify at least one field:value pair.

B. Have the Power role at a minimum.

C. Be able to edit the sourcetype the tag applies to.

D. Must have the tag capability associated with their user role.